Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Aq-ucUF2Y6vnf_pZabxlHVgofWI.cer
File: Aq-ucUF2Y6vnf_pZabxlHVgofWI.cer (raw, json)
Hash identifier: M/tHaesTbjISPkD9xncGaLF4VDShXdTI65D+7H4j+PE=
Subject key identifier: 02:AF:AE:71:41:76:63:AB:E7:7F:FA:59:69:BC:65:1D:58:28:7D:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98CBCF8571
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/Aq-ucUF2Y6vnf_pZabxlHVgofWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:50:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.220.186.0/24
IP: 91.220.206.0/24
IP: 91.220.223.0/24
IP: 91.220.229.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656254403953 (0x98cbcf8571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:50:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02afae71417663abe77ffa5969bc651d58287d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:a8:ba:a7:79:2e:cd:b4:9f:fc:e1:a1:a2:
5b:66:17:0a:6b:54:64:0b:38:18:04:2a:60:2c:d0:
00:07:42:d1:8b:5f:f6:3f:58:61:50:64:db:35:65:
ac:cd:22:c7:e3:d8:97:92:4e:06:57:62:9d:84:93:
62:af:ba:33:c9:00:2e:27:dd:ca:7b:d9:e1:3f:1b:
48:78:b6:2f:41:f7:15:39:41:a4:19:ef:41:ac:d3:
29:22:05:e0:50:58:70:9b:a9:b7:5a:0b:44:8b:b8:
8e:00:51:40:ed:00:8e:5e:06:d6:16:44:0d:29:9c:
85:fd:fa:16:2a:e8:b4:58:7f:fb:42:ce:ec:43:1c:
73:33:40:61:28:95:e9:9b:91:d9:dd:a0:73:a6:5c:
2d:63:a0:ac:8f:e9:74:09:2b:fe:cd:6c:d7:3c:1a:
a7:c7:fe:58:0f:cd:f1:d2:4e:fb:5f:d8:24:c3:4c:
46:e1:2a:3f:1c:61:b9:8d:79:d0:bc:69:11:f9:18:
e9:5d:0d:cc:82:89:62:cd:68:d9:b3:49:3c:c2:51:
39:02:9d:16:b1:c4:23:4c:0e:30:38:2a:8f:2a:66:
58:d2:cf:9f:27:43:c0:48:3c:c8:83:0e:78:eb:d1:
88:1f:3d:63:40:78:79:d5:d6:10:dc:7e:ba:46:31:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:AE:71:41:76:63:AB:E7:7F:FA:59:69:BC:65:1D:58:28:7D:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/Aq-ucUF2Y6vnf_pZabxlHVgofWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.186.0/24
91.220.206.0/24
91.220.223.0/24
91.220.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ff:11:09:32:19:7f:c2:ee:78:45:b6:48:16:8f:31:b7:fc:
d3:77:a5:3a:4d:25:3f:b6:b5:35:bd:5d:a5:b6:78:5c:f8:f1:
6e:44:b4:ee:5e:12:93:4f:b5:80:d9:67:12:6f:0a:be:11:fb:
69:7e:c1:26:fd:dd:1a:ac:fb:54:53:0d:e5:37:31:3a:f8:ab:
ed:85:a3:3f:7f:92:4b:ef:b0:f6:47:cd:c3:32:dc:33:2b:c8:
74:88:b2:0e:f9:07:f5:80:7f:aa:62:c2:e6:51:c1:00:cb:8e:
44:ab:bd:f3:30:7e:54:f5:f9:6e:d3:e2:4e:00:f8:93:1d:a1:
82:93:81:a3:b5:e6:c9:e7:c6:2b:a3:e8:11:89:86:57:79:2a:
39:e1:24:cd:05:41:48:14:8c:57:36:5b:30:8b:02:82:6c:5d:
82:0e:1a:1d:44:b3:0c:de:b8:fa:0c:94:3a:7f:82:77:ed:ad:
31:b8:67:3b:b6:03:2f:39:7f:9b:13:02:31:12:da:8a:df:f6:
ce:2e:b8:e6:64:c8:28:e6:d9:11:f6:8d:5c:98:68:3b:f7:4a:
97:14:2f:55:96:1e:8a:17:2a:c2:16:c5:9d:8b:2c:c5:6f:dc:
b5:c3:3a:3a:fa:13:8f:ea:b2:ce:6f:bd:2d:03:0c:01:85:55:
19:99:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:39:12 2025 by rpki-client